GDPR Compliance

Last updated: 21 April 2026

Our Commitment to GDPR

We are committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area and the United Kingdom.

Data Controller

For the purposes of GDPR, we act as the data controller for personal information collected through this website and our services.

Contact: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases as defined by GDPR:

• Article 6(1)(a) - Consent: When you provide explicit consent through forms or communication
• Article 6(1)(b) - Contract: When processing is necessary for performing a contract with you
• Article 6(1)(f) - Legitimate Interests: For website analytics and service improvement, where such interests are not overridden by your rights

Your Rights Under GDPR

Right to Access (Article 15)

You have the right to request a copy of the personal data we hold about you.

Right to Rectification (Article 16)

You may request correction of inaccurate or incomplete personal data.

Right to Erasure (Article 17)

You may request deletion of your personal data in certain circumstances, including when it is no longer necessary for the purpose it was collected.

Right to Restrict Processing (Article 18)

You may request that we restrict processing of your personal data in specific situations.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object (Article 21)

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22)

We do not use automated decision-making or profiling that produces legal effects concerning you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR.

We may request additional information to verify your identity before processing your request.

Data Transfers

If we transfer your personal data outside the UK or EEA, we ensure appropriate safeguards are in place as required by GDPR, including:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequacy decisions

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours, as required by GDPR Article 33.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact us at [email protected]

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR.

UK Supervisory Authority:
Information Commissioner's Office (ICO)
Website: ico.org.uk

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Client records are typically retained for seven years following project completion.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The date of the last update is shown at the top of this page.